Based on How to write database independent code:
1) Suggest db_query_range when a LIMIT is specified.
2) You might already do this, but suggest NULL instead of ''.
3) Check for table names in braces - one of mine slipped through with back ticks on it.